Client Reference N<??D2301 
WHAT IS CLAIMED IS: 

1 . A method of providing varying levels of security in a data 
processing system, the method comprising: 

receiving information from an outside source; 

retrieving an indicator from the received information that instructs the 
system to operate at a higher level of security; 



preventing operai 



ion at a lower level of security until information is 



received by the system to authori ze a decrease in security levels. 



2. The methc 
receiving an encrj 
Decreased-Security- Authorization 



d of claim 1 and further comprising: 
Dted message, said encrypted message comprising a 
Code to authorize said decrease in security levels. 



3. The method of claim 2 wherein said Decreased-Security- 
Authorization-Code authorizes a qecrease in encryption/decryption levels. 

4. The methodlof claim 2 wherein said Decreased-Security- 
Authorization-Code authorizes a decrease in authentication level. 



5. The method <bf claim 2 wherein said Decreased-Security- 
Authorization-Code authorizes a decrease in authentication level and a decrease in 
encryption/decryption levels. 

6. The method of claim 2 wherein said encrypted message further 
comprises a key for use in a decryption algorithm. 

7. The method ofi claim 6 wherein said system stores a master key to 
decrypt messages comprising new decryption key values and further comprising: 

using said master key ^tored at said system to decrypt said encrypted 

message. 

8. The method of claim 1 and further comprising: 

establishing a Security-Level-Status-Indicator at said system to indicate a 
level of security that is being implemented by the system. 
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9. The^nethod of claim 8 wherein said Security-Level-Status- 
Indicator indicates a level of encryption/decryption that is being implemented by the 
system 

10. The method of claim 8 wherein said Security-Level-Status- 
Indicator indicates a level of authentication that is being implemented by the system. 



1 1 . The method 
Indicator indicates a level of 
being implemented by the system 



of claim 8 wherein said Security-Level-Status- 
authefitication and a level of encryption/decryption that is 



12. Themethoc 
configuring said 
security levels so as to allow said 



of claim 8 and further comprising: 
Security Level Status Indicator to indicate more than two 
ystem to utilize more than two security levels. 



13. Themethoc 
utilizing a cable hepd 



14. Themethoc 
Management Message to convey 



i aid 



15. Themethoc 
Message is authenticated 

16. Themethoc 
Message is protected against a rep 



17. Themethoc 
Message is authenticated and 



of claim 1 and further comprising: 
-end as said outside source. 



of claim 2 and further comprising using a Key 
Decreased Security Authorization Code. 



of claim 14 wherein delivery of said Key Management 

of claim 14 wherein delivery of said Key Management 
ay attack. 



of claim 14 wherein delivery of said Key Management 
protected against a replay attack. 



of claim 1 wherein a lower level of security is non- 
* level of security is a public Key mode, the method 



18. Themethoc 
public Key mode, wherein a highei 
further comprising: 

continuing operatioh of the system in the public Key mode until an 
encrypted predefined message is r< ;ceived by the system from the outside source 
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19. The mdjthod of claim 18 wherein said system stores a master key to 
decrypt messages comprising new decryption key values and further comprising: 

using said master key stored at said system to decrypt said encrypted 

message. 

20. A method pf providing a secure transition between security levels 
in a data processing system, the data processing system having at least a high level of 
security and a low level of security for operation, the method comprising: 

using the system to receive information from an outside source; 
operating the syste n at the high level of security; 
continuing operation of the system at the high level of security until an 
s received by the system from the outside source 
level of security. 



encrypted authorization message 
authorizing a switch to a differen 



21. A cryptographic 
an input to receive 
a Security -Level 
code means for 
cryptographic algorithm is indicat 



device comprising: 
a datastream; 
iJtatus-Indicator; and 

a cryptographic algorithm wherein said 
d by said Security-Level-Status-Indicator. 



ex( :cuting ; 



22. The device is described in claim 21 wherein said code means for 
executing a cryptographic algorithm comprises code means for executing a high level 
cryptographic algorithm and code r leans for executing a low level cryptographic 
algorithm relative to said high level cryptographic algorithm. 

23. The device of claim 22 wherein said high level cryptographic 
algorithm comprises a high level decryption algorithm and wherein said low level 
cryptographic algorithm comprises a low level decryption algorithm. 

24. The device of slaim 22 wherein said high level cryptographic 
algorithm comprises a high level authentication algorithm and wherein said low level 
cryptographic algorithm comprises a low level authentication algorithm. 



1 25. The device of dlaim 22 wherein said high level cryptographic 

2 algorithm comprises a high level deer option algorithm and a high level authentication 
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algorithm and wherein said low level cryptographic algorithm comprises a low level 
decryption algorithm and\a low level authentication algorithm. 

26. The ^device as described in claim 22 wherein said high level 
cryptographic algorithm is apublic Key encryption algorithm and wherein said low level 
cryptographic algorithm is a \ton-public Key encryption algorithm. 

27. The de\tice as described in claim 21 and further comprising code 
means for decrypting a Decreased Security Authorization Code. 

28. The device as described in claim 27 and further comprising code 
means for preventing a replay pttack in delivery of said Decreased-Security- 
Authorization-Code. 

29. The device as described in claim 27 and further comprising a 
master key to use in decrypting! said Decreased Security Authorization Code. 

30. The device as described in claim 21 wherein said Security Level 
Status Indicator is encrypted. 

31. A method! of processing data comprising: 
providing a receiver to receive a transmission; 
establishing a Sequrity-Level-Status-Indicator at said receiver; 
establishing a first level of decryption at said receiver; 
encrypting a first i nessage at a first level of encryption; 
transmitting said first message to said receiver at said first level of 



encryption; 



receiving said first 



message at said receiver; 
decrypting said fir; it message encrypted at said first level of encryption; 
transmitting a Deci eased-Security- Authorization Code to change from said 
first level of decryption to a second level of decryption; 

receiving said Deci eased-Security- Authorization-Code; 
determining a chan; ;e in encryption level from said first level of encryption 
to said second level of encryption; 

adjusting said Seculity-Level-Status-Indicator at said receiver; 
encrypting a seconc message at said second level of encryption; 
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17 transmitting said second message at said second level of encryption; 

1 8 receiving >aid second message at said receiver; and 

19 decrypting said second message at said receiver. 

1 32. An apparatus for processing data comprising: 

2 a receiver tovreceive a transmission; 

3 a Security-Lavel-Status-Indicator stored in said receiver; 

4 first decryptic n code stored in said receiver for use in decrypting said 

5 transmission when encryptec at a first encryption level; 

6 a transmitter 1 o transmit said transmission; 

7 first encryption code stored in said transmitter to encrypt a message at said 

8 first encryption level; 

9 code means for transmitting a Decreased-Security- Authorization-Code 

1 0 from said transmitter to said receiver so as to change from said first level of encryption to 

11 a second level of encryption; 1 

12 second decryption code stored in said receiver for use in decrypting said 

13 transmission when encrypted it said second level of encryption; and 

14 second encrypt on code stored in said transmitter to encrypt at said second 

1 5 encryption level . 
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